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APPLICATION SERVICE 
PROVIDER BASED REDUNDANT 
ARCHIVE SERVICES FOR 
MEDICAL ARCHIVES AND/ OR 
IMAGING SYSTEMS 

i) Background of Invention 

m 

rT [0001] The preferred embodiments of the present invention generally relate to data 
Jp storage and retrieval systems, and in particular relate to a method and system for 

§J[ Application Service Provider (ASP) based redundant archive services for medical 

archives and/or imaging systems. 

y* [0002] Healthcare practitioners, such as physicians, nurses, assistants, or technicians, for 
example, employ medical data for diagnosis and treatment of patients. For example, 

l~I healthcare practitioners may use medical data such as medical images, medical 

reports, applications, and other data, for example, to diagnose and treat patients. 
Medical data may be obtained from direct examination, from other healthcare 
practitioners, from medical diagnostic equipment, and/or from other sources, for 
example. 

[0003] Medical data may be stored in a local database at a healthcare facility, such as a 
hospital, clinic, doctor's office, or other medical office, for example. Storage of 
medical data in a local database may enable the medical data to be used in diagnosis 
and treatment of patients. That is, storage of medical data in a local database may 
improve access and retrieval of data for diagnosis and treatment. Medical data may be 
stored in a local database such as a Picture Archiving and Communication System 
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(PACS). 

[0004] A PACS may be used to obtain, store, and distribute electronic images, such as 
electronic medical diagnostic images. A PACS may allow images to be archived in 
electronic form in a central location on site. A PACS may also allow images to be 
shared among different users because the images are locally centralized and able to 
accessed at numerous points on site. Convenient access to patient data through a 
PACS may improve individual hospital workflow by eliminating the need to physically 
transfer images and by providing multiple viewing stations for imaging results. 

[0005] Typically, data stored in a PACS is stored as DICOM data. DICOM stands for Digital 
Imaging and Communications in Medicine. DICOM is a standard for image and 
information transmission. DICOM relates to the transfer of electronic data between 
medical diagnostic and imaging systems. The DICOM protocol may be employed in 
communication between medical devices and a PACS. The DICOM standard 
enumerates a command set, data formats, interface specifications, communication 
protocols, and command syntax. The DICOM standard does not specify details of 
implementation. 

[0006] Increasingly, healthcare practitioners are relying on the PACS and other digital 
environments for diagnosis and treatment of patients. As customers become more 
reliant on digital environments, there is need for greater backup and redundancy 
capabilities for digital medical data. There is a need for a source that satisfies the 
need for greater backup and redundancy through cost-effective and easily managed 
methods. 

[0007] Centralized access to medical data may also improve diagnosis and treatment of 
patients through ease of retrieval by multiple users and/or multiple locations. In the 
field of computers, Application Service Providers (ASPs) have been employed to allow 
for centralized access and storage of data. ASPs operate as hosts for data and 
applications. Typically, ASPs maintain applications and data in an off-site data center. 
ASPs have been hired by companies in the field of computers to manage data and 
computer applications. Companies may access data and applications via an ASP. 
Typically, in the computer field, companies remotely access data and applications via 
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an ASP central data location. 

[0008] In the field of computers, ASPs may offer several desirable services, such as secure 
data storage, data backup, and redundant systems. Because ASPs offer such services, 
a customer of an ASP may hot have to incur additional expenses for its own security, 
backup, and storage systems. In addition to functioning as a remote database, ASPs 
may host a number of applications that may be activated or accessed remotely by 
customers. By concentrating computing power and maintenance at the ASP, the ASP 
may offer continuous access to and support of the applications and alleviate the need 
for the customer to purchase and maintain its own expensive computer equipment. 

[0009] For example, ASPs may provide installation, management, and support of 

applications and storage of data for many remote clients. Client data may be stored at 
a remote data center. Data may be retrieved from a remote data center via a 
communications medium such as the Internet or a private network. Additionally, ASPs 
may deliver applications such as email systems, resource planning systems, customer 
relationship management systems, human resource management systems, and 
proprietary applications to remote clients. 



q [001 0] Access to medical data may improve diagnosis and treatment of patients by 
+= healthcare practitioners. For example, healthcare practitioners may employ medical 

y diagnostic reports and images in addition to direct examination of the patient by the 

r* healthcare practitioner. Additionally, multiple healthcare practitioners may access 

medical data for diagnosis and treatment of patients. Thus, there is a need for access 
to medical data to aid in medical diagnosis and treatment of patients by 
supplementing the healthcare practitioner's examination. 



[0011] 



Additionally, reliability of access, storage, and/or retrieval of medical data may 
improve diagnosis and treatment of patients by healthcare practitioners. That is, if 
medical data is lost or corrupted, diagnosis and/or treatment of a patient may be 
impaired without reliable retrieval of medical data. Reliable access to medical data 
may help to ensure that patients may be accurately and timely diagnosed and treated 
by healthcare practitioners. For example, protection against corruption or loss of 
medical data ensures that the medical data may be available for use by a healthcare 
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practitioner in diagnosing and/or treating a patient. Thus, there is a need for 
reliability in the storage of medical data to improve diagnosis and treatment of 
patients. 

[0012] Currently, backup systems for local databases in healthcare facilities are typically 
local backup systems. Local backup systems may be expensive for individual 
healthcare facilities. Additionally, local backup systems may require time, money, and 
personnel to maintain. Thus, there exists a need for a centralized archive for medical 
data. 

[001 3] Thus, there is a need for redundant secure storage to guard against data loss. 
That is, redundant secure storage reduces the likelihood that a patient will have to 
return to the healthcare facility and be re-examined to replace images and other 
examination data in the event of data loss and/or corruption. Additionally, there is a 
need for a system that can repair or replace lost and/or corrupted data in the event of 
data loss or system failure. That is, a system that can repair or replace data in the 
event of data loss and/or corruption reduces the probability that a patient will be re- 
examined at a healthcare facility to replace lost and/or corrupted images and other 
examination data. There is also a need for easier data manipulation and/or 
preservation between medical diagnostic system upgrades. For example, there is a 
need for a system to reduce manual transfer and/or re-creation of data, applications, 
and/or operating system information between an old medical diagnostic or storage 
system and a new or replacement system. 

[001 4] Thus, a need exists for storage of data to improve reliability of access to medical 
data for patient diagnosis and treatment. Additionally, there is a need for retrieval of 
medical data to improve reliability of access to medical data in the event of data 
corruption or loss. There is a further need for ease of copying data to improve 
installation and configuration of medical diagnostic and/or storage systems. 

Summary of Invention 

[0015] 

A preferred embodiment of the present invention provides a method and system 
for application service provider based redundant archive services for medical archives 
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and/or imaging systems. In a preferred embodiment, the system comprises a data 
source providing medical data, a status monitor for controlling the transfer of the 
medical data from the data source to a remote data store, and a remote data store 
receiving the medical data and storing the medical data. Preferably, the medical data 
is transferred at a definable interval. In a preferred embodiment, the definable interval 
may be a timed interval, an event-based interval, and/or a manual interval. 
Additionally, the remote data store may restore the medical data to the data source. 
Also, the remote data store preferably may transfer the medical data to a second data 
source. Preferably, the remote data store is an application service provider. The 
system may also include a status monitor for monitoring operations between the data 
source and the remote data store. Additionally, the system may include an access 
authenticator for authenticating access to the remote data store. 

[0016] In a preferred embodiment, the method includes transferring medical data from a 
data source to a remote data store and storing the medical data at the remote data 
store. Preferably, the medical data is stored at the remote data store in a directory 
corresponding to the data source. In a preferred embodiment, the medical data at the 
remote data store may be restored at the data source. Additionally, the medical data 
at the remote data store may be copied to a second data source. 



:i Brief Description of Drawings 

5 : ; 

S [001 7] Figure 1 illustrates a centralized remote data storage and retrieval system for 
archiving and restoring data in accordance with a preferred embodiment of the 
present invention. 

[001 8] Figure 2 illustrates a flowchart for archiving data from a data source at a remote 
data store in accordance with a preferred embodiment of the present invention. 

[0019] Figure 3 illustrates a flowchart for restoring data from a remote data store to a 
data source in accordance with a preferred embodiment of the present invention. 

[0020] Figure 4 illustrates a flowchart for copying data from a remote data store to a data 
source in accordance with a preferred embodiment of the present invention. 

Detailed Description 
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[0021] Figure 1 illustrates a centralized remote data storage and retrieval system 100 for 
archiving and restoring data in accordance with a preferred embodiment of the 
present invention. The centralized remote data storage and retrieval system 1 00 
includes a plurality of subsystems, such as a data source 1 1 0, a remote data store 
1 20, a front-end connection 1 30, a back-end connection 1 35, a status monitor 1 40, 
and an access authenticator 145. 

The front-end connection 1 30 connects the data source 1 1 0 to the status monitor 
140 and the access authenticator 145. That is, the front-end connection 1 30 
facilitates communication between the data source 1 10 and the status monitor 140 
and the access authenticator 1 45. The back-end connection 1 35 connects the status 
monitor 1 40 and the access authenticator 1 45 to the remote data store 1 20. 
Preferably, the front-end connection 1 30 and the back-end connection 1 35 compose 
a data source/data store connection for bi-directional communication between the 
data source 1 1 0 and the remote data store 1 20. 

Preferably, the data source 1 10 is a picture archiving and communications system 
(PACS), a medical diagnostic imaging system, a database system, a computer system, 
a server, a hard disk drive, a terminal, or other medical data storage system, for 
example. Preferably, the data source 1 1 0 includes memory, such as a hard disk drive, 
a CD-ROM drive, a DVD drive, a floppy disk drive, a tape drive, a ZIP drive, a RAM 
(Random Access Memory), and/or an other storage device, for example. The memory 
at the data source 1 1 0 preferably includes files, such as images, reports, applications, 
and/or other data, for example. Files at the data source 1 1 0 preferably are organized 
into at least one directory. 

[0024] The data source 1 1 0 preferably also includes a processor capable of initiating at 
least one of several operation requests, such as an archive request, a restore request, 
and/or a copy request. As further described below, an archive request, for example, is 
a request to store data at the remote data store 120. Additionally, a restore request, 
for example, is a request to retrieve data stored at the remote data store 1 20. Also, a 
copy request is a request to copy data stored by another data source 1 1 5 at the 
remote data store 1 20 to the data source 1 1 0, for example. 



[0022] 



£ [0023] 
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[0025] Preferably, the remote data store 1 20 is an application service provider, but the 
remote data store 1 20 may be a server, a redundant disk array, a RAID (Redundant 
Array of Independent Disks) drive, a hard disk drive, an archive, a database system, a 
computer system, or other central data storage system, for example. The remote data 
store 1 20 has a capacity for data storage, such as a hard disk drive, a CD-ROM drive, 
a floppy disk drive, a tape drive, a ZIP drive, a RAM disk, and/or an other storage 
device, for example. The data storage preferably accommodates files, such as images, 
reports, applications, and/or other data, for example. Preferably, the files in the 
remote data store 1 20 are organized in directories corresponding to the data source 
1 1 0. Preferably, the remote data store 1 20 also includes a processor capable of 
executing operations such as an archive operation, a restore operation, and/or a copy 
operation, for example. Additionally, the processor preferably may scan the directory 
of the data source 1 1 0. The processor may also examine files at the data source 1 1 0 

2? and/or the remote data store 120. In an alternative embodiment, the remote data 

y* , . 

03 store 1 20 may be cached and stored at a plurality of locations. 
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[0026] In a preferred embodiment, the front-end connection 1 30 is a private network 
connection, such as a Digital Subscriber Line (DSL), a T1 line, an ISDN (Integrated 
Services Digital Network) line, an ATM (Asynchronous Transfer Mode) connection, a 
direct cable connection, or other private network, for example. Alternatively, the data 
source/data store connection 130 may be a dial-up modem connection (that is, via 
telephone line and computer modem), ethernet connection, the Internet, cable modem 
connection, wireless communication, a cable, a wire, or other network connection, for 
example. The front-end connection facilitates the bi-directional transmission and/or 
reception of files, commands, instructions, communication information, and/or other 
data, for example, between the data source 1 1 0 and the status monitor 1 40 and the 
access authenticator 145. 



[0027] 



In a preferred embodiment, the back-end connection 1 35 is substantially similar 
to the front-end connection 1 30 described above. The back-end connection facilitates 
the bi-directional transmission and/or reception of files, commands, instructions, 
communication information, and/or other data, for example, between the remote data 
store 120 and the status monitor 140 and the access authenticator 145. Preferably, 
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the front-end connection 1 30 and the back-end connection 1 35 compose a data 
source/data store connection to transfer data between the data source 1 1 0 and the 
remote data store 1 20. 

[0028] In a preferred embodiment, the status monitor 1 40 monitors the data source 1 1 0, 
the remote data store 1 20, the front-end connection 1 30, and/or the back-end 
connection 135. That is, the status monitor 140 monitors and/or controls activities 
such as requests by the data source 1 1 0, requests by the remote data store 1 20, data 
at the data source 1 1 0, data at the remote data store 1 20, data traveling over the 
front-end connection 1 30 and/or the back-end connection 1 35, commands and/or 
instructions traveling over the front-end connection 1 30 and/or the back-end 
connection 135, for example. Preferably, the status monitor 140 includes a processor 
to monitor the data source 1 1 0, the remote data store 1 20, the front-end connection 
130, and/or the back-end connection 135. Preferably, the status monitor 140 may 
transmit commands and/or instructions, for example, to the data source 1 1 0 and/or 
the remote data store 120. Additionally, the status monitor 140 preferably may 
receive commands and/or instructions, for example, from the data source 1 1 0 and/or 
the remote data store 1 20. 

[0029] The access authenticator 145 authenticates access of the remote data store 120 
by the data source 1 1 0. Additionally, the access authenticator 1 45 may authenticate 
access of the data source 1 1 0 by the remote data store 1 20. Preferably, the access 
authenticator 145 includes a predetermined authentication code or set of 
authentication codes (such as a database or table of codes, for example). For 
example, the access authenticator 145 preferably includes an authentication code 
input by a user, an authentication code generated daily, an authentication code 
generated monthly, a randomly generated authentication key, and/or other 
authentication code, for example. The access authenticator may receive an 
authentication code, such as a password, identification number, or other 
authentication code, for example, from the data source 1 1 0, the remote data store 
120, and/or the status monitor 140. Preferably, the authentication code may be 
assigned according to an individual user, a group of users, a type of data source, a 
location, and/or a function, for example. 
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[0030] In a preferred embodiment, the front-end connection 1 30 connects the data 

source 1 10 to the status monitor 140 and the access authenticator 145. Preferably, 
the back-end connection 1 35 connects the remote data store 1 20 to the status 
monitor 140 and the access authenticator 145. The status monitor 140 may connect 
to the access authenticator 145 via a network connection, such as the Internet 
ethernet, direct cable connection, wireless, modem, wire, physical connection, or 
other network connection, for example. The location of the status monitor 140 with 
respect to the data source 1 1 0 and/or the remote data store 1 20 is not fixed. That is, 
the status monitor 140 may be located at the data source 1 1 0, the remote data store 
1 20, and/or the access authenticator 145. Additionally, the location of the access 
authenticator 1 45 with respect to the data source 1 1 0 and/or the remote data store 
120 is not fixed. That is, the access authenticator 145 may be located at the data 
source 1 1 0, the remote data store 1 20, and/or the status monitor 1 40. 

[0031] As mentioned above, the data source 1 10 preferably includes a processor capable 
of initiating at least one of several operation requests, such as an archive request, a 
restore request, and/or a copy request. Each operation request is further discussed 
individually below. With respect to the archive operation request, the system 100 
preferably operates as follows. First, data, such as an image or other medical data is 
obtained using medical diagnostic equipment and/or a healthcare practitioner. The 
image may be an x-ray image, an ultrasound image, a magnetic resonance image, or 
a computerized tomography image, for example. Other medical data may include 
examination reports, patient demographic data, and/or scheduling data, for example. 
The image of a patient may be obtained using medical diagnostic equipment, such as 
an x-ray imaging system, a magnetic resonance imaging system, or a computerized 
tomography imaging system, for example. For example, a patient visits a hospital for 
a computerized tomography (CT) scan, and a technician obtains the image using a 
computerized tomography imaging system. Then, the data is stored at the data source 
1 1 0. For example, the technician stores the CT image of the patient at a PACS at the 
hospital. 



[0032] 



Preferably, the status monitor 1 40 detects the storing of the data at the data 
source 1 1 0 via the front-end connection 1 30. Then, the status monitor 140 may 
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prompt the data source 1 10 for an authentication code, which is discussed above. 
Next, the data source 1 10 transmits the authentication code to the access 
authenticator 145 via the status monitor 140. Then, the access authenticator 145 
compares the received authentication code to the predetermined authentication code, 
which is discussed above. If the authentication code does not match the 
predetermined authentication code, then access to the remote data store 1 20 is not 
allowed. Alternatively, another attempt may be made to enter an authentication code. 
If the authentication code matches the predetermined authentication code, then the 
status monitor 140 triggers an archive request to be sent to the remote data store 
1 20 via the back-end connection 1 35. For example, the status monitor 1 40 detects 
the storage of the computerized tomography image of the patient at the PACS and 
instructs the PACS to transmit the machine identification number of the PACS to the 
□ access authenticator 145. Then, for example, if the machine identification number 

^ matches an entry in the authentication code database of the access authenticator 145, 

ffl the access authenticator 145 allows the status monitor 140 to trigger an archive 

£ request to the remote data store 1 20. 



"... : 



[0033] Next, the remote data store 120 receives the archive request. Then, the remote 
data store 1 20 processes the request. Preferably, the remote data store 1 20 
determines if a directory exists at the remote data store 1 20 that corresponds to the 
data source 1 10. Then, the remote data store 120 and/or the status monitor 140 may 
determine which files from the data source 1 1 0 are up-to-date at the remote data 
store 1 20 and which files are to be transferred and stored at the remote data store 
1 20. For example, the remote data store 1 20 locates the directory for the PACS at the 
remote data store 1 20. The status monitor 140, for example, then determines that the 
new CT image is not in the PACS directory at the remote data store 1 20. 



[0034] 



Next, the status monitor 140 preferably instructs the data source 1 1 0 to transmit 
the data to be stored to the remote data store 1 20 via the front-end connection 1 30 
and the back-end connection 1 35. For example, the status monitor 140 transmits 
instructions to the PACS directing the PACS to transmit the CT image to the remote 
data store 1 20. Then, the remote data store 1 20 archives the data sent by the data 
source 1 1 0 at the remote data store 1 20. Preferably, the data is archived at the 
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remote data store 1 20 at the directory which corresponds to the data source 1 1 0. For 
example, the remote data store 120 stores the CT image file from the PACS in the 
PACS directory at the remote data store 1 20. 

[0035] After the data is transferred between the data source 1 1 0 and the remote data 
store 1 20, the status monitor 1 40 may verify the transmission and/or receipt of the 
data. That is, the status monitor 1 40 may verify the transmission and/or receipt of the 
data by comparing file names, file sizes, file time stamps, file checksums, data 
transmission codes, and/or error correction codes, for example. For example, the 
status monitor may verify the transfer of the CT image from the PACS to the remote 
data store 1 20 by performing a cyclic redundancy check (CRC) on the data or by 
checking the parity bits of the transferred data, for example, to insure that data was 
not lost or corrupted during transmission. 

[0036] In an alternative embodiment, the archive request may be triggered after a 

definable interval, such as a timed interval, an event-based interval, and/or another 
programmed interval. That is, a timed trigger may trigger an archive request hourly, 
daily, weekly, monthly, quarterly, and/or yearly, for example. For example, the PACS 
a* may be programmed to request an archive operation at the end of every day. Also, an 

jp event-based trigger may trigger an archive request after data is obtained, after data is 

saved, upon system shutdown, and/or upon program error, for example. 

l7 [0037] For a restore request, the system 100 preferably operates as follows. First, data, 
such as an image or other medical data is obtained and archived at the remote data 
store 1 20 as described above in relation to the archive operation. For example, an x- 
ray image of a patient and a radiology report for the patient are obtained and stored 
at a local PACS at a clinic. The image and report are then archived at the remote data 
store 1 20 in a directory corresponding to the PACS. 



[0038] 



In a preferred embodiment, an operation attempts to access the data at the data 
source 1 1 0 and discovers an error in the data. For example, a user attempts to view 
the x-ray image and radiology report at the PACS and discovers that the image and 
report have been corrupted. Alternatively, the data source 1 1 0 may automatically 
discover the error in the data. Preferably, the status monitor 140 detects the error, 
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such as data loss, data corruption, and/or system failure, for example, at the data 
source 1 1 0 via the front-end connection 1 30. 

[0039] Then, the status monitor 1 40 may prompt the data source 1 1 0 for an 

authentication code, as discussed above. Next, the data source 1 10 transmits the 
authentication code to the access authenticator 1 45 via the status monitor 1 40. Then, 
the access authenticator 145 compares the received authentication code to the 
predetermined authentication code, as discussed above. If the authentication code 
does not match the predetermined authentication code, then access to the remote 
data store 1 20 is not allowed. Alternatively, another attempt may be made to enter an 
authentication code. If the authentication code matches the predetermined 
authentication code, then the status monitor 140 triggers a restore request to be sent 
to the remote data store 1 20 via the back-end connection 1 35. For example, the 
status monitor 140 detects corruption of the x-ray image at the PACS and instructs 
the PACS to transmit the monthly access password to the access authenticator 145. 
Then, for example, if the monthly access password matches the monthly password in 
the database of the access authenticator 145, the access authenticator 1 45 allows the 
status monitor 140 to trigger a restore request to the remote data store 1 20. 



~ [0040] Next, the remote data store 120 receives the restore request. Then, the remote 
H= data store 1 20 processes the request. Preferably, the remote data store 1 20 

q determines if a directory exists at the remote data store 1 20 that corresponds to the 

^ data source 1 1 0. Next, the remote data store 1 20 determines if the lost and/or 

corrupted data is present in the directory at the remote data store 1 20. If the data is 
not present in the directory at the remote data store 1 20, then the restore operation is 
halted. If the data is present in the directory at the remote data store 120, then the 
data may be retrieved. For example, the remote data store 120 locates the directory 
for the PACS at the remote data store 1 20. Next, for example, the remote data store 
1 20 determines that the x-ray image and the radiology report are stored at the 
directory for the PACS at the remote data store 1 20. 



[0041] 



Next, the status monitor 140 preferably instructs the remote data store 120 to 
transmit the data to be restored to the data source 1 1 0 via the back-end connection 
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1 35" and the front-end connection 1 30. For example, the status monitor 1 40 
transmits instructions to the remote data store 120 directing the remote data store 
120 to transmit the x-ray image and radiology report to the PACS. Then, the data 
source 1 1 0 restores the data sent by the remote data store 1 20 at the data source 
1 10. For example, the PACS stores the x-ray image file and radiology report from the 
PACS directory at the remote data store 1 20 at the PACS. 

[0042] After the data is transferred between the remote data store 1 20 and the data 

source 1 1 0, the status monitor 1 40 may verify the transmission and/or receipt of the 
data. That is, the status monitor 1 40 may verify the transmission and/or receipt of the 
data by comparing file names, file sizes, file time stamps, file checksums, data 
transmission codes, and/or error correction codes, for example. For example, the 

^ status monitor may verify the transfer of the x-ray image and the radiology report 

53 

yi from the remote data store 1 20 by performing a cyclic redundancy check (CRC) on the 

t~ data or by checking the parity bits of the transferred data, for example, to insure that 

data was not lost or corrupted during transmission. 

3 "; [0043] For a copy request, the system 1 00 preferably operates as follows. First, data, 
s such as an image or other medical data is obtained, stored at a data source 1 1 5, and 

7? archived at the remote data store 1 20 as described above in relation to the archive 

ft operation. For example, an ultrasound image of a patient and an electrocardiogram 

Q (ECG) for the patient are obtained and stored at a local PACS at a clinic. The image and 

r ~~ ECG are then archived at the remote data store 1 20 in a directory corresponding to 

the PACS. 

[0044] 

Preferably, the status monitor 140 detects the installation of a new data source 
1 1 0, such as an upgraded data source or a replacement data source, for example. 
Then, the status monitor 140 may prompt the data source 1 1 0 for an authentication 
code, as discussed above. Next, the data source 1 10 transmits the authentication 
code to the access authenticator 145 via the status monitor 1 40. Then, the access 
authenticator 145 compares the received authentication code to the predetermined 
authentication code, as discussed above. If the authentication code does not match 
the predetermined authentication code, then access to the remote data store 1 20 is 
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not allowed. Alternatively, another attempt may be made to enter an authentication 
code. If the authentication code matches the predetermined authentication code, then 
the status monitor 1 40 triggers a copy request to be sent to the remote data store 
1 20. For example, the status monitor 1 40 detects the connection of a newer PACS to 
the system 1 00 for upgrade and instructs the newer PACS to transmit the secure 
identification key to the access authenticator 145. Then, for example, if the secure 
identification key from the newer PACS matches the secure identification key in the 
database of the access authenticator 145, the access authenticator 145 allows the 
status monitor 140 to trigger a copy request to the remote data store 1 20. 

[0045] Next, the remote data store 1 20 receives the copy request. Then, the remote data 
store 1 20 processes the request. Preferably, the remote data store 120 determines if a 
_ directory exists at the remote data store 1 20 that corresponds to the data source 1 1 5. 

gy Then, the status monitor 1 40 determines which data is to be copied to the data source 

rii 

1^ 110. Next, the remote data store 120 determines if the data to be copied to the data 

M 5 source 1 1 0 is present in the directory for the data source 1 1 5 at the remote data store 

\i 1 20. For example, the remote data store 1 20 locates the directory for the PACS at the 

^ remote data store 1 20. The status monitor 140, for example, then determines that the 

p ultrasound image and the ECG are to be copied to the newer PACS. Next, for example, 

J the remote data store 1 20 determines that the ultrasound image and the ECG are 

yj stored at the directory for the PACS at the remote data store 1 20. 

Q 

[0046] Next, the status monitor 1 40 preferably instructs the remote data store 1 20 to 
transmit the data to be copied to the data source 1 1 0. For example, the status 
monitor 140 transmits instructions to the remote data store 120 directing the remote 
data store 1 20 to transmit the ultrasound image and ECG to the newer PACS. Then, 
the data source 1 1 0 copies the data sent by the remote data store 1 20 at the data 
source 1 10. For example, the newer PACS stores the ultrasound image file and ECG 
from the PACS directory at the remote data store 1 20 at the newer PACS. 

[0047] 

After the data is transferred between the remote data store 1 20 and the data 
source 1 1 0, the status monitor 1 40 may verify the transmission and/or receipt of the 
data. That is, the status monitor 140 may verify the transmission and/or receipt of the 
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data by comparing file names, file sizes, file time stamps, file checksums, data 
transmission codes, and/or error correction codes, for example. For example, the 
status monitor may verify the transfer of the ultrasound image and the ECC from the 
remote data store 1 20 by performing a cyclic redundancy check (CRC) on the data or 
by checking the parity bits of the transferred data, for example, to insure that data 
was not lost or corrupted during transmission. 

[0048] In an alternative embodiment, periodic copy operations may be executed to 

update the data source 1 1 0 with new data from the data source 1 1 5. Alternatively, the 
entire contents of the data source 1 1 5 may be copied to the data source 1 1 0 in a copy 
operation. In an alternative embodiment, the data from the data source 1 1 5 is deleted 
from the remote data store 1 20 after the data is copied to the data source 1 1 0. 



[0049] 



m 



In an alternative embodiment which may be applied to all of the above disclosed 
embodiments, the system 1 00 may comprise a plurality of data sources 1 1 0, 1 1 5. If 
multiple data sources 110, 115 attempt to access the remote data store 1 20 and/or if 
a single data source 110, 115 transmits multiple requests to the remote data store 
1 20, the status monitor 1 40 may preferably arbitrate access to the remote data store 
120. The status monitor 140 may arbitrate access to the remote data store 120 by 
allowing access to the remote data store 1 20 according to the priority of the data 
source 110, 115. Priority may include system priority, timing priority, or request 
priority, for example. For example, with system priority, a PACS may have a higher 
priority than an x-ray imaging system. With timing priority, for example, the system 
which has been waiting for the longest amount of time has a higher priority of access. 
For example, with request priority, a restore request may have a higher priority than a 
copy request. A data source 110, 115 may wait for access to the remote data store 
120 until access is granted by the status monitor 140. For example, an ultrasound 
imaging system and an x-ray imaging system attempt to access the remote data store 
120. The x-ray imaging system, for example, has a higher system priority than the 
ultrasound imaging system and is thus allowed to access the remote data store 120 
first. The ultrasound imaging system waits for the remote data store 1 20 to complete 
the request of the x-ray imaging system and then the ultrasound imaging system may 
access the remote data store 120. Alternatively, the system 100 may accommodate 
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multiple requests and/or multiple data sources. Alternatively, the system 100 may 
arbitrate command execution rather than access. 

[0050] Figure 2 illustrates a flowchart 200 for archiving data from a data source at a 
remote data store in accordance with a preferred embodiment of the present 
invention. The data source may be a picture archiving and communications system 
(PACS), a medical diagnostic imaging system, a database system, a computer system, 
a server, a hard disk drive, a terminal, or other data storage system, for example. The 
remote data store may be an application service provider, a server, ^redundant disk 
array, a RAID drive, a hard disk drive, an archive, a database system, a computer 
system, or other central data storage system, for example. 

[0051] First, at step 210, data is obtained from a patient. Data may include an image 
(such as an x-ray image, an ultrasound image, a computerized tomography image, 
and/or a magnetic resonance image, for example) and/or other medical data (such as 
examination reports, electrocardiograms, patient demographic data, and/or 
scheduling data, for example). Data may be obtained using medical diagnostic 
equipment and/or examination by a healthcare professional, for example. For 
example, an x-ray image of a patient is obtained at a hospital. Next, at step 220, the 
data is stored at the data source. For example, the patient's x-ray image is stored in a 
PACS at the hospital. 

[0052] Then, at step 230, an archive request is triggered. The archive request may be 

triggered by a status monitor, by the data source, and/or by the remote data source, 
for example. The request may preferably be triggered by programmed trigger and/or 
by manual trigger, for example. Preferably, a programmed trigger may trigger a 
request after a time interval (such as hourly, daily, monthly, yearly, etc.), an event 
(such as file creation, data storage, system failure, program error, and/or system 
shutdown, for example), or other such definable interval. For example, the status 
monitor detects the storage of the x-ray image in the PACS and triggers a request to 
archive the x-ray image. 



[0053] 



Next, at step 240, the identity of the data source is authenticated to verify that the 
data source may access the remote data store. Preferably, authentication is facilitated 
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using an authentication code, such as an authorization code, a personal identification 
number, a machine identification number, a password, or other identification code, for 
example. Preferably, the authentication code is transmitted automatically by the data 
source or input by a user, for example, after prompting by the status monitor. If the 
authentication code does not match a predetermined authentication code (such as a 
daily generated code, a monthly generated code, a random key, or other 
predetermined authentication code, for example), access is not granted. Alternatively, 
another attempt may be made to authenticate the access. If the authentication code 
matches the predetermined authentication code, the authentication code is verified, 
and access to the remote data store is authorized. For example, the status monitor 
prompts a technician at the PACS to enter a password to access the remote data store. 
Then, for example, the password is compared to the preset monthly password. If the 

O technician's password matches the preset monthly password, the PACS may access the 

S remote data store. 

[0054] Then, at step 250, if multiple data sources are attempting to access a single 
\l remote data store, access to the remote data store may be arbitrated or controlled. 

^ Access arbitration may be facilitated by allowing access to the remote data store 

q according to priority. Priority may include system priority, timing priority, or request 

priority, for example. That is, system priority indicates that one system has a higher 
U priority of access than another system. Also, timing priority indicates that the system 

2 that has been waiting for access for the longest amount of time has a higher priority 

of access. Additionally, request priority signifies that certain operation requests may 
have a higher priority of access than other operation requests. Preferably, data 
sources may wait for access to the remote data store until access is granted through 
access arbitration. For example, the PACS and an x-ray system attempt to access the 
remote data store. The PACS, for example, initiates the access before the x-ray 
system and thus is first in time. Therefore, for example, the PACS is allowed to access 
the remote data store first. The x-ray system, for example, waits for the remote data 
store to complete the archive request of the PACS and then may access the remote 
data store. Alternatively, multiple accesses may be allowed at the remote data store. 



[0055] 



Next, at step 260, the data source is examined to determine which data is to be 
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archived at the remote data store. The status monitor, the data source, and/or the 
remote data store may determine which data is new or updated data to be archived at 
the remote data store and which data has already been archived at the remote data 
store. For example, the status monitor examines the directory of the PACS and locates 
the new x-ray image file to be archived at the remote data store. Alternatively, all data 
at the data source may be selected for archiving at the remote data store. Additionally, 
a user at the data source may manually select the data to archive at the remote data 
store (such as by clicking on file names in a backup program, for example). 

[0056] Then, at step 270, the data is transferred from the data source to the remote data 
store. That is, files stored at the data source are transmitted to the remote data store. 
Preferably, the remote data store includes a directory, for example, in which to archive 
^ data from the data source. Alternatively, the remote data store includes a hard disk 

%8 drive and/or other storage area, for example, in which to archive data from the data 

01 

source. In the event of an archive request, data may be transferred from the data 
M= source to the directory, for example, of the remote data store to backup data and 

C§S= 

\l provide data reliability and security, for example. For example, the x-ray image file is 

^ transferred from the PACS to a directory at the remote data store which corresponds 

Q to the PACS. Data may be transmitted on a file-by-file basis, on a disk-by-disk basis, 

T on a data block-by-data block basis, or on a bit-by-bit basis, for example. 

yj 

Q [0057] Next, at step 280, the transfer of data between the data source and the remote 
5 ™ data store is verified. That is, the data transfer may be verified by comparing file 

names, file sizes, file time stamps, file checksums, data transmission codes, and/or 
error correction codes, for example. For example, the status monitor may verify the 
transfer of the x-ray image file from the PACS to the remote data store by performing 
a cyclic redundancy check (CRC) on the file or by checking the parity bits of the 
transferred data, for example, to insure that data was not lost or corrupted during 
transmission. 

[0058] 

Finally, at step 290, the triggered request is reset so that a new request may be 
triggered. For example, the status monitor signal to initiate an archive operation is 
reset to normal upon completion of the backup and verification that the PACS data has 
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been archived at the remote data store. 

[0059] Figure 3 illustrates a flowchart 300 for restoring data from a remote data store to 
a data source in accordance with a preferred embodiment of the present invention. 
First, data is obtained and archived at the remote data store in a method substantially 
similar to that described above in relation to Figure 2. The data is preferably archived 
at the remote data store in a directory corresponding to the data source, as described 
above. Then, at step 310, an error occurs at the data source. The error may include 
data loss, data corruption, system failure, program error, and/or power loss, for 
example. For example, an x-ray image is corrupted in a PACS and is unviewable. 

[0060] Then, at step 320, a restore request is triggered. The restore request may be 

triggered by a status monitor, by the data source, and/or by the remote data source, 
C3 for example. The request may preferably be triggered by programmed trigger and/or 

•=JL£ 

m by manual trigger, for example. Preferably, a programmed trigger may trigger a 

03 request after an event, such as system failure, data corruption, data loss, and/or 

jg program error, for example, occurs. For example, a user attempts to access the x-ray 

J image at the PACS and discovers that the x-ray image is corrupted. The status 

3 monitor, for example, detects the corrupted x-ray image in the PACS and triggers a 

]S request to restore the x-ray image. 

yj [0061] Next, at step 330, the identity of the data source is authenticated to verify that the 
2 data source may access the remote data store. Preferably, authentication proceeds as 

described above in reference to Figure 2. For example, the status monitor prompts a 
technician at the PACS to enter a password to access the remote data store. Then, for 
example, the password is compared to the preset monthly password. If the 
technician's password matches the preset monthly password, the PACS may access the 
remote data store. 



[0062] 



Then, at step 340, if multiple data sources are attempting to access a single 
remote data store, access to the remote data store may be arbitrated or controlled. 
Access arbitration may be facilitated by allowing access to the remote data store 
according to priority, as described above in reference to Figure 2. Preferably, data 
sources may wait for access to the remote data store until access is granted through 
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access arbitration. For example, the PACS and an x-ray system attempt to access the 
remote data store. The restore request of the PACS, for example, has a higher priority 
than the archive request of the x-ray system, and, thus, the PACS is allowed to access 
the remote data store first. The x-ray system, for example, waits for the remote data 
store to complete the restore request of the PACS and then may access the remote 
data store. Alternatively, multiple accesses may be allowed at the remote data store. 

[0063] Next, at step 350, the data source is examined to determine which data is to be 
restored from the remote data store. The status monitor, the data source, and/or the 
remote data store may determine which data is lost or corrupted data to be restored 
at the data source and which data is already present at the data source. For example, 
the status monitor examines the directory of the PACS and locates the corrupted x-ray 
image file to be restored. Alternatively, a user at the data source may manually select 
the data to restore from the remote data store (such as by clicking on file names in a 
restore program, for example). 

[0064] Then, at step 360, the data is transferred from the remote data store to the data 
source. That is, files stored at the remote data store are transmitted to the data 
source. Preferably, the remote data store includes a directory, for example, which 
contains data from the data source. Alternatively, the remote data store includes a 
hard disk drive and/or other storage area, for example, which contains data from the 
data source. In the event of a restore request, data may be transferred from the 
directory, for example, of the remote data store to the data source. For example, the 
x-ray image file is transferred to the PACS from the directory at the remote data store 
which corresponds to the PACS. Data may be transmitted on a file-by-file basis, on a 
disk-by-disk basis, on a data block-by-data block basis, or on a bit-by-bit basis, for 
example. Preferably, the data is not deleted from the remote data store after transfer 
and may be used again to restore at the data source 1 1 0. 



[0065] 



Next, at step 370, the transfer of data between the remote data store and the data 
source is verified. That is, the data transfer may be verified by comparing file names, 
file sizes, file time stamps, file checksums, data transmission codes, and/or error 
correction codes, for example. For example, the status monitor may verify the transfer 
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of the x-ray image file from the remote data store to the PACS by performing a cyclic 
redundancy check (CRC) on the file or by checking the parity bits of the transferred 
data, for example, to insure that data was not lost or corrupted during transmission. 

Finally, at step 380, the triggered request is reset so that a new request may be 
triggered. For example, the status monitor signal to initiate a restore operation is 
reset to normal upon completion of the restore and verification that the data has been 
restored at the PACS. 

Figure 4 illustrates a flowchart 400 for copying data from a remote data store to a 
data source in accordance with a preferred embodiment of the present invention. 
First, data is obtained from a first data source and archived at the remote data store in 
a method substantially similar to that described above in relation to Figure 2. The data 
is preferably archived at the remote data store in a directory corresponding to the first 
data source, as described above. Then, at step 41 0, a second data source is installed. 
That is, an additional, upgraded, and/or replacement data source may be added along 
with or in place of the first data source. For example, a hospital upgrades their data 
storage capabilities and installs a new PACS to replace the old PACS. 

Then, at step 420, a copy request is triggered. The copy request may be triggered 
by a status monitor, by the first data source, by the second data source, and/or by the 
remote data source, for example. The request may preferably be triggered by 
programmed trigger and/or by manual trigger, for example. Preferably, a 
programmed trigger may trigger a request after an event (such as system start-up, 
system installation, and/or connection to the network, for example), or other such 
definable interval. For example, the status monitor detects the presence of the new 
PACS and triggers a request to copy the data from the old PACS to the new PACS. 

Next, at step 430, the identity of the second data source is authenticated to verify 
that the second data source may access the remote data store. Preferably, 
authentication proceeds as described above in reference to Figure 2. For example, the 
status monitor prompts a technician at the new PACS to enter a password to access 
the remote data store. Then, for example, the password is compared to the preset 
monthly password. If the technician's password matches the preset monthly password, 
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the new PACS may access the remote data store. 

[0070] Then, at step 440, if multiple data sources are attempting to access a single 

remote data store, access to the remote data store may be arbitrated or controlled. 
Access arbitration may be facilitated by allowing access to the remote data store 
according to priority, as described above in reference to Figure 2. Preferably, data 
sources may wait for access to the remote data store until access is granted through 
access arbitration. For example, the new PACS and an x-ray system attempt to access 
the remote data store. The PACS, for example, has a higher system priority than the 
x-ray system, and, thus, the PACS is allowed to access the remote data store first. The 
x-ray system, for example, waits for the remote data store to complete the copy 
request of the PACS and then may access the remote data store. Alternatively, multiple 
accesses may be allowed at the remote data store. 

[0071] Next, at step 450, the remote data store is examined to determine which data is 
to be copied from the remote data store to the second data source. The status 
monitor, the data source, and/or the remote data store may determine which data is 
to be copied from the remote data store to the second data source and which data is 
already present or unnecessary at the second data source. Preferably, the remote data 
store includes a directory, for example, which contains data from the first data source. 
Alternatively, the remote data store may include a hard disk drive and/or other 
storage area, for example, which contains data from the first data source. Thus, the 
directory, for example, which contains data from the first data source may be 
examined to determined which data is to be copied to the second data source. For 
example, the status monitor examines the directory of the remote data store and . 
locates the directory containing files from the old PACS. Alternatively, a user at the 
data source may manually select the data to copy from the remote data store (such as 
by clicking on file names in a copy program, for example). 



[0072] 



Then, at step 460, the data is transferred from the remote data store to the 
second data source. That is, files stored at the remote data store are transmitted to 
the second data source. In the event of a copy request, data may be transferred from 
the directory, hard disk drive, and/or storage area, for example, of the remote data 
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store which corresponds to the first data source to the second data source. For 
example, data in the directory of the remote data store corresponding to the first data 
source is transferred to the second data source. Data may be transmitted on a file-by- 
file basis, on a disk-by-disk basis, on a data block-by-data block basis, or on a bit- 
by-bit basis, for example. Preferably, the data is not deleted from the remote data 
store after the data is copied to the second data source. 

[0073] Next, at step 470, the transfer of data between the remote data store and the 

second data source is verified. That is, the data transfer may be verified by comparing 
file names, file sizes, file time stamps, file checksums, data transmission codes, 
and/or error correction codes, for example. For example, the status monitor may 
verify the transfer of the files from the remote data store to the PACS by performing a 
cyclic redundancy check (CRC) on the file or by checking the parity bits of the 
_gp transferred data, for example, to insure that data was not lost or corrupted during 

transmission. 

[0074] Finally, at step 480, the triggered request is reset so that a new request may be 
triggered. For example, the status monitor signal to initiate a copy operation is reset 
s to normal upon completion of the copy operation and verification that the data has 

IS been copied to the new PACS. 

hi [0075] In an alternative embodiment, periodic copy operations may be executed to 
rr update the second data source with new data from the first data source. Alternatively, 

the entire contents of the first data source may be copied to the second data source in 
a copy operation. In an alternative embodiment, the data from the first data source is 
deleted from the remote data store after the data is copied to the second data source. 



[0076] 



Thus, the preferred embodiments of the present invention provide centralized 
archiving and retrieval of medical data via a remote data store. That is, a data source 
may archive data at the remote data store and retrieve the data in the event of a 
system failure, file corruption, or data loss, for example. Additionally, the preferred 
embodiments provide for retrieval of data from a central remote data store at multiple 
locations. For example, a first hospital with a first PACS may archive the data from the 
first PACS at the remote data store. Then, a second hospital with a second PACS may 
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copy the data from the remote data store onto the second PACS. Thus, the files may 



be reliably retrieved and accessed at a variety of locations via the remote data store. 



[0077] 



Thus, the preferred embodiments allow reliable access to medical data by 



providing a remote data store to archive data from a data source and restore data at 
the data source. That is, in the event of data loss and/or corruption, the data may be 
restored at the data source by the remote data store. Additionally, in the event of a 
system failure, the data at the remote data store may be copied to a replacement 
system. Thus, the preferred embodiments provide reliable access to medical data to 
aid in the diagnosis and treatment of patients by helping to insure that data is 
available so that healthcare practitioners may use the data to aid in the diagnosis and 
treatment of patients. 

[0078] While the invention has been described with reference to a preferred embodiment, 
it will be understood by those skilled in the art that various changes may be made and 
equivalents may be substituted without departing from the scope of the invention. In 
addition, many modifications may be made to adapt a particular situation or material 
to the teachings of the invention without departing from its scope. Therefore, it is 
intended that the invention not be limited to the particular embodiment disclosed, but 
that the invention will include all embodiments falling within the scope of the 
appended claims. 
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